Information security is part of our responsibility.
Our information security management system, which complies with ISO/IEC 27001:2022, establishes security throughout the organization. Management is responsible for this; the certification body regularly monitors the management system.
That means you get a systematic approach to risks, responsibilities, and protective measures – from development through to operation.
The scope of certification
Design, development, quality assurance, and operation of the FUTURA platform. The certificate serves as documentation of the audited scope of our information security management system.

Protection of company data
The focus is on confidential purchasing data.
FUTURA protects confidential purchasing information through task-specific authorization models and technical security measures. Depending on the application, these include controlled access, the separation of customer data, and the protection of data transfers.
Access and permissions
Task-specific access policies govern permissions for professional use, administration, and support.
Processing protection
The separation of customer data and the protection of data transfers ensure the secure handling of confidential information. We provide technical details on a case-by-case basis.
Reliable operation
Development, quality assurance, and operations are part of our certified management system. Operational and safety certifications complement your audit.
SAP-native integration.
Tested compatibility with SAP S/4HANA.
FUTURA connects procurement processes to the context of your SAP system. SAP certifications confirm that integration has been tested for each of the scenarios listed.
This provides your IT department with a verifiable basis for evaluating the integration. Your purchasing department benefits from procurement processes that remain connected to the corresponding SAP business transactions.
SAP and the FUTURA applications remain the primary systems for their respective data and business processes. Based on your application, we will explain which data remains in SAP and which is processed in FUTURA.
SAP-native integration does not mean that all data is stored exclusively in SAP. The specific data processing is recorded in relation to each application.
Security in Procurement Intelligence
More insights. A clear framework for your data.
Procurement Intelligence enhances the procurement process with AI-based analyses and evaluations. Its implementation focuses on the protection of confidential information and user accountability.
The location of data processing, storage, erasure and the permissible use of data by AI services are all part of this consultation – including the issue of using data for model training.
Defined analysis profiles
The purpose, scope of data, and permitted processing of each AI-supported analysis are clearly defined. This ensures transparency regarding what information is used in each analysis.
Defined AI services
The models or gateways to be used and their processing conditions are determined for the specific task.
Responsibility stays in place
An AI-powered assessment supports the decision-making process. It does not replace the established responsibilities and approvals.
Clear agreements create reliability.
Data protection requires clearly defined responsibilities. Appropriate agreements and technical and organizational measures provide the framework for data processing on behalf of others
Our data protection policy addresses data retention and erasure. Regular training sessions raise our employees' awareness regarding the handling of personal data.
We support your security and compliance audits by providing information that is relevant to the intended use. This enables your procurement, IT, and data protection teams to systematically assess your company’s requirements.
A solid foundation for your security audit.
For an initial overview, you’ll find documentation here regarding our information security management and SAP integration. We’ll compile more detailed information tailored to your planned application and the information needs of your IT and data protection departments.
Information Security
ISO/IEC 27001:2022
Certificate showing scope, certification authority, and validity period.
Integration
SAP certifications
Evidence of verified integration with SAP S/4HANA for the specified products and scenarios.
In-depth review
Technical and contractual documents
Information on data protection, access control, data processing, operations, and AI services for your use case.
Better decisions. Built on SAP.
Which requirements are most important to you?
Feel free to bring any questions posed by your purchasing, or IT departments, or your security questionnaire. Together, we’ll determine how FUTURA meets your needs and what documentation you’ll need to make your decision.
